StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
pimcorehelmforgeVerified publisher2.0.72 of 6See more

pimcore helmforge 2.0.7

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.2916834e49961
brotli@1.2.0-r0
1.2.1-r0
library/nginx:1.30.4-alpine3.24dc5069ad14f1
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,929
poznotehelmforgeVerified publisher2.0.81 of 1See more

poznote helmforge 2.0.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/timothepoznanski/poznote:6.121.0c98d753c27c6
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

53
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.30.4-alpineadf5042a17f4
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,422
rustfshelmforgeVerified publisher1.1.11 of 1See more

rustfs helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.39ca9559533b5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
ryothelmforgeVerified publisher1.0.21 of 2See more

ryot helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,473
stalwarthelmforgeVerified publisher1.1.11 of 1See more

stalwart helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.27c429b311c93d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,243
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,761
strava-statisticshelmforgeVerified publisher1.1.191 of 2See more

strava-statistics helmforge 1.1.19

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,277
supersethelmforgeVerified publisher1.4.21 of 5See more

superset helmforge 1.4.2

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

35,531
text-embeddings-inferencehelmforgeVerified publisher1.0.22 of 2See more

text-embeddings-inference helmforge 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.30.4-alpine442753882674
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.42538ea1c9640
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,313
tomcathelmforgeVerified publisher1.0.91 of 2See more

tomcat helmforge 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/tomcat:11.0.27-jdk17-temurin-noble6e8cc13f7956
brotli@1.1.0-2build2
no fix listed

Open the chart page →

876
twentyhelmforgeVerified publisher1.0.92 of 5See more

twenty helmforge 1.0.9

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.30.4-alpineadf5042a17f4
brotli@1.2.0-r1
1.2.1-r0
twentycrm/twenty:v2.49.080e1b33b0b4b
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,146
webodmhelmforgeVerified publisher1.1.21 of 4See more

webodm helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opendronemap/nodeodm:3.6.2fcd99eb23d8d
brotli@1.1.0-2build2
no fix listed

Open the chart page →

13,492
zookeeperhelmforgeVerified publisher1.2.01 of 1See more

zookeeper helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/zookeeper:3.9.65bad433c7170
brotli@1.0.9-2build6
no fix listed

Open the chart page →

3,768
mywebhelm-httpdVerified publisher0.3.01 of 1See more

myweb helm-httpd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:latest46a65814cc05
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,520
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

84,323
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latest357724bf0ae2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,660
openaevhelm-openbasVerified publisher2.0.174 of 7See more

openaev helm-openbas 2.0.17

4 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
openaev/platform:3.261022.0a8d4597d5ca5
brotli@1.1.0-2build2
no fix listed
openbas/caldera-server:5.1.0a277796d9724
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
rustfs/rustfs:1.0.39ca9559533b5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

80,323
openbashelm-openbasVerified publisher1.8.143 of 7See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
openbas/caldera-server:5.1.0a277796d9724
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
openbas/platform:2.0.5d986d80b0a75
brotli@1.1.0-2build2
no fix listed

Open the chart page →

85,165
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,647
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,013
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
brotli@1.0.9-2build6
no fix listed

Open the chart page →

7,460
my-nginxhelmtaiwo0.1.01 of 1See more

my-nginx helmtaiwo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,585
zigbee2mqtthelm-zigbee2mqttVerified publisher1.4.21 of 1See more

zigbee2mqtt helm-zigbee2mqtt 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

335
nominatimheywood8-helm-chartsVerified publisher3.10.82 of 3See more

nominatim heywood8-helm-charts 3.10.8

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0
mediagis/nominatim:4.2d0eae7b51374
brotli@1.0.9-2build6
no fix listed

Open the chart page →

15,835
hivemq-edgehivemqOfficialVerified publisher0.1.371 of 1See more

hivemq-edge hivemq 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hivemq/hivemq-edge:2026.15da9e7b6b3139
brotli@1.1.0-2build2
no fix listed

Open the chart page →

757
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
brotli@1.0.9-2build6
no fix listed
hmediade/printserver-init:latest7f005eb6c718
brotli@1.0.9-2build6
no fix listed

Open the chart page →

13,281
mdbook-htmxholmes0.2.11 of 1See more

mdbook-htmx holmes 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpinedf221db836e1
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

132
homeboxhomebox-helmVerified publisher0.3.01 of 2See more

homebox homebox-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sysadminsmedia/homebox:0.26.056e880b62309
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,283
changedetectionhomeenterpriseinc0.2.01 of 2See more

changedetection homeenterpriseinc 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.44534b9bc5c46e
brotli@1.0.9
1.2.1

Open the chart page →

2,683
cloudbeaverhomeenterpriseinc0.6.01 of 1See more

cloudbeaver homeenterpriseinc 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:21.3.00c0985098263
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,559
homeassistanthomeenterpriseinc0.3.01 of 1See more

homeassistant homeenterpriseinc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2022.3.5565751f33794
brotli@1.0.9
1.2.1

Open the chart page →

9,710
ipsechomeenterpriseinc0.7.01 of 1See more

ipsec homeenterpriseinc 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hwdsl2/ipsec-vpn-server:latestc5d8675b7468
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

68
plexhomeenterpriseinc0.14.01 of 1See more

plex homeenterpriseinc 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.23.6.4881-e2e58f321cf4e864d8bc0
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,350
radarrhomeenterpriseinc0.2.01 of 1See more

radarr homeenterpriseinc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/radarr:3.2.25965bbb2f90d
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

6,936
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,459
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

19,601
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,541
webserverhongshaoyangVerified publisher0.1.31 of 1See more

webserver hongshaoyang 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:alpine435f992d5616
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

113
paperlesshpVerified publisher0.1.22 of 5See more

paperless hp 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

42,418
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

74,697
eoloplanthttpd-eoloplant0.1.02 of 7See more

eoloplant httpd-eoloplant 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
brotli@1.0.9-2build6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

38,091
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
brotli@1.0.9-2build6
no fix listed
apache/skywalking-ui:9.2.0295f1dc87d98
brotli@1.0.9-2build6
no fix listed

Open the chart page →

18,900
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
brotli@1.0.7-6ubuntu0.1
no fix listed
apache/skywalking-ui:8.9.180530f0308a5
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

23,027
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

4,392
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

10,539
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,064
nginx-charthyomin-nginx0.1.01 of 1See more

nginx-chart hyomin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
antiantiops/vscode-browser-docker:1.143.1cc26f69360f9
brotli@1.1.0-2build2
no fix listed
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
anujdatar/cups:25.07.01685df04a643b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/activemq-artemis:2.44.00305c26f19ed
brotli@1.1.0-2build2
no fix listed
1
apache/activemq-artemis:2.37.0bae523439ee3
brotli@1.1.0-2build2
no fix listed
1
apache/airflow:2.8.4-python3.964e58748b6b9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/airflow:2.8.1e5560ad0b86e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/answer:2.0.30863470d8293
brotli@1.2.0-r1
1.2.1-r0
1
apache/camel-k:2.11.0d173e7efe258
brotli@1.2.0-3build1
no fix listed
1
apache/druid:37.0.00116fb802786
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/druid:29.0.10cef139b6bf1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/druid:38.0.04156a8ca87b8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
brotli@1.0.9-2build6
no fix listed
1
apache/hertzbeat:1.8.075d48a62748f
brotli@1.1.0-2build2
no fix listed
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
brotli@1.1.0-2build2
no fix listed
1
apache/james:distributed-3.7.2660c0fa12ec2
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apache/kafka:4.3.2852a0d49fc4e
brotli@1.2.0-r1
1.2.1-r0
1
apache/nifi-registry:1.27.063b8e3e40742
brotli@1.0.9-2build6
no fix listed
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
brotli@1.0.9-2build6
no fix listed
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apachepulsar/pulsar:5.0.07222f3199a0b
brotli@1.2.0-r1
1.2.1-r0
1
apachepulsar/pulsar:3.0.79c9947de139d
brotli@1.0.9-2build6
no fix listed
1
apachepulsar/pulsar:2.9.0d056c89b7131
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apachepulsar/pulsar:2.8.2d538416d5afe
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apache/ranger:2.7.076c176e8a0e4
brotli@1.0.9-2build6
no fix listed
1
apache/rocketmq:5.3.0434d8398f996
brotli@1.1.0-2build2
no fix listed
1
apache/rocketmq-exporter:0.0.2c8fb51195444
brotli@1.0.9-2build6
no fix listed
1
apache/skywalking-oap-server:9.2.0133d35d2c263
brotli@1.0.9-2build6
no fix listed
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apache/skywalking-ui:9.2.0295f1dc87d98
brotli@1.0.9-2build6
no fix listed
1
apache/skywalking-ui:8.9.180530f0308a5
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
brotli@1.0.9
1.2.1
1
apache/superset:4.0.1ab9467fd712c
brotli@1.0.9-2+b6
brotli@1.0.9
1.0.9-2+deb12u1
1.2.1
1
apache/tika:2.9.2.1-fullae0b86d3c4d0
brotli@1.1.0-2build2
no fix listed
1
apache/tika:latest-fulld69fab827fa0
brotli@1.2.0-3build1
no fix listed
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
brotli@1.1.0-2+b7
brotli@1.1.0
1.1.0-2+deb13u1
1.2.1
1
appwrite/appwrite:2.5.000bf6b9a0be8
brotli@1.2.0-r1
1.2.1-r0
1
appwrite/appwrite:1.9.01aaa70127114
brotli@1.2.0-r0
1.2.1-r0
1
appwrite/new:1.2.74-self-hostedb16ee4e5c19c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
aquasec/tracee:0.24.1cfbbfee972e6
brotli@1.1.0-r2
1.1.1-r0
1
aquasec/trivy:0.74.062b1e65e8869
brotli@1.2.0-r1
1.2.1-r0
1
aquasec/trivy:0.76.1790fd66d1697
brotli@1.2.0-r1
1.2.1-r0
1
aquasec/trivy:0.69.3bcc376de8d77
brotli@1.2.0-r0
1.2.1-r0
1
arbuzov/claude-code-api:0.1.02d7dd8070610
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
arcadedata/arcadedb:26.10.27a498ebbbb9a
brotli@1.2.0-r1
1.2.1-r0
1
archivebox/archivebox:0.9.73d4720d86c0e9
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
1
aristidetm/basic-notebook:3.6.5469dbc951224
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.